Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
File: vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft (raw, json)
Hash identifier: YvuNM/Q8aM8qDG44HgTDQSHLpUmHE0TCUe++1IZYltY=
Subject key identifier: 30:6F:5A:4E:10:8B:7C:A7:C3:6D:F1:66:0E:69:CA:39:FE:17:6E:21
Authority key identifier: BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D
Certificate issuer: /CN=bd175e878d33b47d806f2cf3e04628220935123d
Certificate serial: 019A4D06833C8B492AFBCB1CB936FC6856F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 04:01:03 +0000
Manifest this update: Tue 04 Nov 2025 04:01:03 +0000
Manifest next update: Wed 05 Nov 2025 04:01:03 +0000
Files and hashes: 1: 2-07O751wdyGKAW0YILhDfu5qkw.roa (hash: fB1EFjaCWmBPZRv7eqtWNxstJCPemsgGxR6JMfmq3lk=)
2: WE-ha4uuIxgDDk1GggO-fRIkCmg.roa (hash: qPLc76pSVkRIP6FJCW3n1YPCDV38MKiyxzMwCqEdLYE=)
3: rJOG1wKAKCxZh5niPNA4FH37mIc.roa (hash: X4QsRK+QpuGnJBsier1FeNXw4mgUeL4O+Xn8bqgXMxU=)
4: vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl (hash: 44JWDI0HNo7eeHoSGIhDSBKOIC9ewGvM9K6xTekG5ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:83:3c:8b:49:2a:fb:cb:1c:b9:36:fc:68:56:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd175e878d33b47d806f2cf3e04628220935123d
Validity
Not Before: Nov 4 04:01:03 2025 GMT
Not After : Nov 5 04:01:03 2025 GMT
Subject: CN=306f5a4e108b7ca7c36df1660e69ca39fe176e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d1:01:10:b3:8b:fb:06:c1:7f:a1:9b:17:64:
e8:43:1e:c8:3e:4a:42:de:88:01:ec:67:9b:7e:9d:
64:c7:ef:85:c0:44:1c:58:24:7f:67:98:e4:95:28:
e1:cc:a3:5f:08:c0:9e:a6:2e:47:9f:9c:f8:df:4a:
43:be:1d:64:01:53:77:09:f3:41:cd:18:0f:7c:9d:
6c:75:30:2d:8e:20:55:b2:d1:a5:44:64:d7:f6:62:
1e:0a:c2:02:f3:64:92:1f:55:3a:24:1d:0c:1d:70:
63:5c:df:3c:81:c7:b6:18:5c:08:21:eb:5d:57:d1:
1c:fb:ef:3c:9b:aa:e3:c7:0e:60:c4:2d:8c:42:61:
bc:a8:09:e5:d5:09:27:d8:bb:38:e9:b6:47:ef:0f:
06:18:eb:80:27:d0:33:ed:aa:0e:6f:0c:39:e8:56:
a7:b2:db:a5:b7:ac:4e:80:21:2b:e2:e3:33:ff:8f:
a1:7a:85:90:cb:a7:f8:7c:02:50:7c:27:2f:12:02:
82:c5:98:12:2f:43:87:e8:be:45:67:55:65:db:6a:
57:86:79:09:a0:15:a8:1a:40:2a:a7:2e:0e:e6:d6:
d5:81:ef:e0:7f:a9:ee:0f:45:47:25:3e:d7:27:69:
ce:b8:c0:17:08:0a:56:3b:64:dc:f5:89:2b:cc:43:
b7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6F:5A:4E:10:8B:7C:A7:C3:6D:F1:66:0E:69:CA:39:FE:17:6E:21
X509v3 Authority Key Identifier:
keyid:BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:41:41:5a:a9:11:9b:d5:b4:3e:ef:2c:69:65:c4:cf:59:67:
0d:27:45:b2:8a:4d:5e:1f:4c:9c:e1:00:97:ee:95:1d:56:94:
79:33:b6:59:0b:a3:92:9d:fc:d6:be:a5:7c:cf:0e:8d:92:af:
9a:f3:9c:f8:e3:be:6b:f0:f4:eb:d2:6c:5b:dc:3a:14:de:a4:
71:8f:d3:18:1a:df:4f:c3:e8:ba:17:61:f7:2b:99:9d:95:88:
be:6f:77:d1:f1:19:3d:58:dc:fb:b3:d3:6e:1a:c2:2d:b1:43:
e7:44:22:0d:1e:c4:03:1b:4e:6c:53:84:7f:6c:8c:6f:e7:d7:
86:7c:e2:45:e4:41:85:ca:0f:11:a1:80:fc:3c:ce:49:98:ae:
88:a8:5b:f4:25:12:b5:cf:c6:03:08:05:60:ab:a4:d0:3d:db:
1d:de:ab:95:f9:85:ab:35:fd:79:ca:7f:b2:68:4f:1d:db:1d:
b5:7e:c2:aa:7d:6f:8a:bb:11:79:f4:67:6c:61:fd:aa:d0:5a:
5b:d4:1f:85:77:aa:8a:39:9b:d9:4d:66:e5:b5:1c:b7:16:61:
7d:a3:04:34:0c:c9:9d:b0:e8:43:1f:ee:20:bd:2b:a9:47:aa:
11:0d:11:b7:8b:92:ed:b9:d1:d6:f3:27:a5:f3:51:48:2c:35:
eb:0b:a1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:02 2025 by rpki-client